Exploit for Double Free in Microsoft

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very ow...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept...

LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

Exploit for CVE-2026-26555

🔍 Vulnerability Research A curated collection of in-depth vul...

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public. Cisco's PSIRT says it has not seen the flaw...

CVE-2026-6815

creationtimestamp| type| source ---|---|--- 2026-06-04 15:07:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87299 2026-06-04 21:00:04+00:00| seen| Telegram/hAogTto79Jt-ZuW6HpUeFLdQ6LmAiGRTnFY6xKkiQBfaYY...

CVE-2026-54458

creationtimestamp| type| source ---|---|--- 2026-06-04 14:49:58+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35 2026-07-15 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq2bpz642l 2026-07-15 23:01:02+00:00|...

poc-exploit-github-actions-pull-request-write-vuln-demo

No d...

Use of Weak Hash

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Use of Weak Hash in the mlflow.data.digestutils function. An...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the mlflow.data.digestutils function. An attacker can compromise data integrity or cause unexpected behavior by exploiting the use of a weak hash algorithm during dataset digest computation. PoC python import pandas ...

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

It got stupid again. The internet still feels held together with tape. Bad plugins, old bugs, fake tools, trusted apps doing shady things. Same mess, new wrapper. And now the weird stuff is normal. Forums go down and come back worse. Cheap hackers get better toys. AI starts breaking real systems...

Lack of transparency in Cisco Unified Communications Manager

Cisco has identified a vulnerability in Unified Communications Manager CM and Unified Communications Manager Session Management Edition CM SME. A malicious individual could exploit this vulnerability to carry out a Server-Side Request Forgery SSRF attack. Successful exploitation could result in t...

CVE-2026-54353

creationtimestamp| type| source ---|---|--- 2026-06-04 08:57:12+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gfq7-5x4g-3xhf 2026-06-26 21:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wwbufwl2l 2026-06-28 11:00:56+00:00|...

CVE-2026-54351

creationtimestamp| type| source ---|---|--- 2026-06-04 08:55:20+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-rgvg-3wpc-h44p 2026-06-26 21:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wjwi2zx2m 2026-06-26 22:07:44+00:00|...

CVE-2026-53755

creationtimestamp| type| source ---|---|--- 2026-06-04 08:37:00+00:00| published-proof-of-concept| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c 2026-06-23 21:04:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moycht3map2r 2026-06-24 09:11:18+00:00...

CVE-2026-54096

creationtimestamp| type| source ---|---|--- 2026-06-04 05:54:39+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-3q2p-72cj-682c...

PT-2026-46888

Name of the Vulnerable Software and Affected Versions Shopware versions 6.7.3.0 through 6.7.10.0 Description An open redirect exists in the public SSO entry point at GET /api/oauth/sso/auth. When the endpoint is accessed without the expected SSO session state, the application uses the Referer...

CVE-2026-49144

creationtimestamp| type| source ---|---|--- 2026-06-03 21:38:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rpw-6cqh-2v9h 2026-06-03 23:10:53+00:00| seen| https://gist.github.com/alon710/f7bc5351b219485c56b8d23a92985578 2026-06-03 23:20:57+00:00| seen|...

CVE-2026-35904

creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 19:00:30+00:00| seen| Telegram/Ze-uNkS3kIdAJGbWQE6AK--K-SMWz6YbrFE-sDGCdUicf4Q 2026-06-03 21:00:04+00:00| seen|...

CVE-2026-35905

creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 21:00:04+00:00| seen| Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk...